Логотип exploitDog
product: "gitlab"
Консоль
Логотип exploitDog

exploitDog

product: "gitlab"
Gitlab

Gitlabвеб-платформа для управления проектами и репозиториями программного кода, работа которой основана на популярной системе контроля версий Git.

Релизный цикл, информация об уязвимостях

Продукт: Gitlab
Вендор: gitlab

График релизов

18.518.618.7202520262027

Недавние уязвимости Gitlab

Количество 5 237

debian логотип

CVE-2018-19584

больше 6 лет назад

GitLab EE, versions 11.x before 11.3.11, 11.4 before 11.4.8, and 11.5 ...

CVSS3: 7.5
EPSS: Низкий
nvd логотип

CVE-2018-19583

больше 6 лет назад

GitLab CE/EE, versions 8.0 up to 11.x before 11.3.11, 11.4 before 11.4.8, and 11.5 before 11.5.1, would log access tokens in the Workhorse logs, permitting administrators with access to the logs to see another user's token.

CVSS3: 6.5
EPSS: Низкий
debian логотип

CVE-2018-19583

больше 6 лет назад

GitLab CE/EE, versions 8.0 up to 11.x before 11.3.11, 11.4 before 11.4 ...

CVSS3: 6.5
EPSS: Низкий
nvd логотип

CVE-2018-19582

больше 6 лет назад

GitLab EE, versions 11.4 before 11.4.8 and 11.5 before 11.5.1, is affected by an insecure direct object reference vulnerability that permits an unauthorized user to publish the draft merge request comments of another user.

CVSS3: 4.3
EPSS: Низкий
debian логотип

CVE-2018-19582

больше 6 лет назад

GitLab EE, versions 11.4 before 11.4.8 and 11.5 before 11.5.1, is affe ...

CVSS3: 4.3
EPSS: Низкий
nvd логотип

CVE-2018-19581

больше 6 лет назад

GitLab EE, versions 8.3 up to 11.x before 11.3.11, 11.4 before 11.4.8, and 11.5 before 11.5.1, is vulnerable to an insecure object reference vulnerability that allows a Guest user to set the weight of an issue they create.

CVSS3: 7.5
EPSS: Низкий
debian логотип

CVE-2018-19581

больше 6 лет назад

GitLab EE, versions 8.3 up to 11.x before 11.3.11, 11.4 before 11.4.8, ...

CVSS3: 7.5
EPSS: Низкий
nvd логотип

CVE-2018-19580

больше 6 лет назад

All versions of GitLab prior to 11.5.1, 11.4.8, and 11.3.11 do not send an email to the old email address when an email address change is made.

CVSS3: 5.3
EPSS: Низкий
debian логотип

CVE-2018-19580

больше 6 лет назад

All versions of GitLab prior to 11.5.1, 11.4.8, and 11.3.11 do not sen ...

CVSS3: 5.3
EPSS: Низкий
nvd логотип

CVE-2018-19579

больше 6 лет назад

GitLab EE version 11.5 is vulnerable to a persistent XSS vulnerability in the Operations page. This is fixed in 11.5.1.

CVSS3: 5.4
EPSS: Низкий

Уязвимостей на страницу

Уязвимость
CVSS
EPSS
Опубликовано
1
debian логотип
CVE-2018-19584

GitLab EE, versions 11.x before 11.3.11, 11.4 before 11.4.8, and 11.5 ...

CVSS3: 7.5
0%
Низкий
больше 6 лет назад
nvd логотип
CVE-2018-19583

GitLab CE/EE, versions 8.0 up to 11.x before 11.3.11, 11.4 before 11.4.8, and 11.5 before 11.5.1, would log access tokens in the Workhorse logs, permitting administrators with access to the logs to see another user's token.

CVSS3: 6.5
0%
Низкий
больше 6 лет назад
debian логотип
CVE-2018-19583

GitLab CE/EE, versions 8.0 up to 11.x before 11.3.11, 11.4 before 11.4 ...

CVSS3: 6.5
0%
Низкий
больше 6 лет назад
nvd логотип
CVE-2018-19582

GitLab EE, versions 11.4 before 11.4.8 and 11.5 before 11.5.1, is affected by an insecure direct object reference vulnerability that permits an unauthorized user to publish the draft merge request comments of another user.

CVSS3: 4.3
0%
Низкий
больше 6 лет назад
debian логотип
CVE-2018-19582

GitLab EE, versions 11.4 before 11.4.8 and 11.5 before 11.5.1, is affe ...

CVSS3: 4.3
0%
Низкий
больше 6 лет назад
nvd логотип
CVE-2018-19581

GitLab EE, versions 8.3 up to 11.x before 11.3.11, 11.4 before 11.4.8, and 11.5 before 11.5.1, is vulnerable to an insecure object reference vulnerability that allows a Guest user to set the weight of an issue they create.

CVSS3: 7.5
0%
Низкий
больше 6 лет назад
debian логотип
CVE-2018-19581

GitLab EE, versions 8.3 up to 11.x before 11.3.11, 11.4 before 11.4.8, ...

CVSS3: 7.5
0%
Низкий
больше 6 лет назад
nvd логотип
CVE-2018-19580

All versions of GitLab prior to 11.5.1, 11.4.8, and 11.3.11 do not send an email to the old email address when an email address change is made.

CVSS3: 5.3
0%
Низкий
больше 6 лет назад
debian логотип
CVE-2018-19580

All versions of GitLab prior to 11.5.1, 11.4.8, and 11.3.11 do not sen ...

CVSS3: 5.3
0%
Низкий
больше 6 лет назад
nvd логотип
CVE-2018-19579

GitLab EE version 11.5 is vulnerable to a persistent XSS vulnerability in the Operations page. This is fixed in 11.5.1.

CVSS3: 5.4
0%
Низкий
больше 6 лет назад

Уязвимостей на страницу


Поделиться